Approved changes feed: RSS · Atom

cpe:2.3:a:netcore:nr268:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNetcore (ebda05da-f232-5bcd-abc7-24a3271d338c)
ProductNr268 (f9e39a55-4145-5acb-9b31-e0599d257b67)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-76852 vulnerable 2026-09-16 04:32:47.853144 Netcore NR268 1.7.121109 Forgeable Firmware Authenticity Check in mtd_write
HIGH (8.8)
Netcore NR268 firmware version 1.7.121109 has an improper integrity verification flaw in mtd_write allowing forged firmware authenticity checks. Attackers can exploit put_file.cgi and check_image_uuid.c to bypass firmware signature validation and load unauthorized firmware images.
Published: 2026-09-15T21:57:48.762Z
Updated: 2026-09-17T16:52:31.430Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-76853 vulnerable 2026-09-16 04:32:47.818888 Netcore NR268 1.7.121109 Security Check Bypass in parame_put_file.cgi
HIGH (8.1)
Netcore NR268 firmware version 1.7.121109 contains a security check bypass vulnerability in the parame_put_file.cgi restore archive prefix validation. Attackers can exploit the flawed prefix check in put_parame_file_cgi.c to bypass restricted restore archive handling.
Published: 2026-09-15T21:57:49.437Z
Updated: 2026-09-16T19:08:16.783Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.